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Abstract 
The purpose of this document is to make the Advanced Encryption 
Standard (AES) Key Wrap algorithm conveniently available to the 
Internet community. The United States of America has adopted AES as 
the new encryption standard. The AES Key Wrap algorithm will 
probably be adopted by the USA for encryption of AES keys. The 
authors took most of the text in this document from the draft AES Key 
Wrap posted by NIST. 
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1. Introduction 


NOTE: Most of the following text is taken from [AES-WRAP], and the 
assertions regarding the security of the AES Key Wrap algorithm are 
made by the US Government, not by the authors of this document. 


This specification is intended to satisfy the National Institute of 
Standards and Technology (NIST) Key Wrap requirement to: Design a 
cryptographic algorithm called a Key Wrap that uses the Advanced 
Encryption Standard (AES) as a primitive to securely encrypt 
plaintext key(s) with any associated integrity information and data, 
such that the combination could be longer than the width of the AES 
block size (128-bits). Each ciphertext bit should be a highly non- 
linear function of each plaintext bit, and (when unwrapping) each 
plaintext bit should be a highly non-linear function of each 
ciphertext bit. It is sufficient to approximate an ideal 
pseudorandom permutation to the degree that exploitation of 
undesirable phenomena is as unlikely as guessing the AES engine key. 


This key wrap algorithm needs to provide ample security to protect 
keys in the context of prudently designed key management 
architecture. 


Throughout this document, any data being wrapped will be referred to 
as the key data. It makes no difference to the algorithm whether the 
data being wrapped is a key; in fact there is often good reason to 
include other data with the key, to wrap multiple keys together, or 
to wrap data that isn't strictly a key. So, the term "key data" is 
used broadly to mean any data being wrapped, but particularly keys, 
since this is primarily a key wrap algorithm. The key used to do the 
wrapping will be referred to as the key-encryption key (KEK). 


In this document a KEK can be any valid key supported by the AES 
codebook. That is, a KEK can be a 128-bit key, a 192-bit key, or a 
256-bit key. 


2. Overview 
The AES key wrap algorithm is designed to wrap or encrypt key data. 


The key wrap operates on blocks of 64 bits. Before being wrapped, 
the key data is parsed into n blocks of 64 bits. 
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The only restriction the key wrap algorithm places on n is that n be 
at least two. (For key data with length less than or egual to 64 
bits, the constant field used in this specification and the key data 
form a single 128-bit codebook input making this key wrap 
unnecessary.) The key wrap algorithm accommodates all supported AES 
key sizes. However, other cryptographic values often need to be 
wrapped. One such value is the seed of the random number generator 
for DSS. This seed value reguires n to be greater than four. 
Undoubtedly other values reguire this type of protection. Therefore, 
no upper bound is imposed on n. 


The AES key wrap can be configured to use any of the three key sizes 
supported by the AES codebook. The choice of a key size affects the 
overall security provided by the key wrap, but it does not alter the 
description of the key wrap algorithm. Therefore, in the description 
that follows, the key wrap is described generically; no key size is 
specified for the KEK. 


2.1 Notation and Definitions 


The following notation is used in the description of the key wrapping 


algorithms: 

AES(K, W) Encrypt W using the AES codebook with key K 

AES-1(K, W) Decrypt W using the AES codebook with key K 

MSB(3, W) Return the most significant j bits of W 

LSB(j, W) Return the least significant j bits of W 

Bl ^ B2 The bitwise exclusive or (XOR) of Bl and B2 

B1 | B2 Concatenate Bl and B2 

K The key-encryption key K 

n The number of 64-bit key data blocks 

S The number of steps in the wrapping process, s - 6n 

P[i] The ith plaintext key data block 

C[i] The ith ciphertext data block 

A The 64-bit integrity check register 

R[i] An array of 64-bit registers where 
ie O. Lj 2% sg A 

Alt], R[il[t] The contents of registers A and R[i] after encryption 
step t. 

IV The 64-bit initial value used during the wrapping 
process. 


In the key wrap algorithm, the concatenation function will be used to 
concatenate 64-bit guantities to form the 128-bit input to the AES 
codebook. The extraction functions will be used to split the 128-bit 
output from the AES codebook into two 64-bit guantities. 
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2.2 Algorithms 


The specification of the key wrap algorithm reguires the use of the 
AES codebook [AES]. The next three sections will describe the key 
wrap algorithm, the key unwrap algorithm, and the inherent data 
integrity check. 


2.2.1 Key Wrap 
The inputs to the key wrapping process are the KEK and the plaintext 


to be wrapped. The plaintext consists of n 64-bit blocks, containing 
the key data being wrapped. The key wrapping process is described 


below. 

Inputs: Plaintext, n 64-bit values (Pl, P2, ..., Pn), and 
Key, K (the KEK). 

Outputs: Ciphertext, (n+1) 64-bit values (CO, Cl, ..., Cn}. 


1) Initialize variables. 
Set AO to an initial value (see 2.2.3) 
For i = 1 ton 
R[0][i] = P[i] 


2) Calculate intermediate values. 


For t = 1 tos, where s = 6n 
A[t] = MSB(64, AES(K, A[t-1] | R[t-1][11)) ^ € 
For i = 1 to n-1 
R[t][i] = R[t-1] [1+1] 
R[t] [n] = LSB (64, AES(K, A[t-1] | R[t-1][1])) 


3) Output the results. 


Set C[0] = Alt] 
For i = 1 ton 
C[i] = R[t] [i] 


An alternative description of the key wrap algorithm involves 
indexing rather than shifting. This approach allows one to calculate 
the wrapped key in place, avoiding the rotation in the previous 
description. This produces identical results and is more easily 
implemented in software. 
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Inputs:  Plaintext, n 64-bit values (Pl, P2, ..., Pn), 
Key, K (the KEK). 
Outputs: Ciphertext, (n+1) 64-bit values (CO, Cl, ..., 
1) Initialize variables. 
Set A = IV, an initial value (see 2.2.3) 
For i = 1 ton 
R[i] = P[i] 
2) Calculate intermediate values. 
For j = 0 to 5 
For i-1 ton 
B = AES(K, A | R[i]) 
A = MSB(64, B) ^ t where t = (n*5)+i 
R[i] = LSB(64, B) 
3) Output the results. 
Set C[0] = A 
For i = 1 to n 
C[i] = R[i] 
2.2.2 Key Unwrap 
The inputs to the unwrap process are the KEK and (n+1) 


of ciphertext consisting of previously wrapped key. 


September 2002 


64-bit blocks 


It returns n 


blocks of plaintext consisting of the n 64-bit blocks of the 


decrypted key data. 


Cn), 


and 


Inputs: Ciphertext, (n+1) 64-bit values (CO, C1, ..., 
Key, K (the KEK). 
Outputs: Plaintext, n 64-bit values (Pl, P2, ..., Pn) 
1) Initialize variables. 
Set A[s] = C[0] where s = 6n 
For i = 1 ton 
R[s][i] = C[i] 
2) Calculate the intermediate values. 
For t = s to 1 
A[t-1] = MSB(64, AES-1(K, ((A[t] ^ t) | R[t][n])) 
R[t-1][1] = LSB(64, AES-1(K, ((A[t]^t) | R[t][n])) 
For i = 2 to n 
R[t-1][i] = R[t][i-1] 
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3) Output the results. 
If A[0] is an appropriate initial value 
Then 
For i = 1 ton 
P[i] = R[0] [i] 
Else 


Return an error 
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(see 2.2.3), 


The unwrap algorithm can also be specified as an index based 


operation, allowing the calculations to be carried out in place. 
Again, this produces the same results as the register shifting 
approach. 
Inputs: Ciphertext, (n+1) 64-bit values (CO, C1, ..., Cn), and 
Key, K (the KEK). 
Outputs: Plaintext, n 64-bit values (PO, P1, K, Pn). 
1) Initialize variables. 
Set A = C[0] 
For i = 1 ton 
R[i] = C[i] 
2) Compute intermediate values. 
For j = 5 to 0 
For i = n to 1 
B = AES-1(K, (A^ t) | R[i]) where t = n*jti 
A = MSB(64, B) 
R[i] = LSB(64, B) 
3) Output results. 
If A is an appropriate initial value (see 2.2.3), 
Then 
For i = 1 ton 
P[i] = R[i] 
Else 
Return an error 
2.2.3 Key Data Integrity -- the Initial Value 
The initial value (IV) refers to the value assigned to A[0] in the 


first step of the wrapping process. 
integrity check on the key data. In 
process, the recovered value of A[0] 
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This value is used to obtain an 
the final step of the unwrapping 
is compared to the expected 
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value of A[0]. If there is a match, the key is accepted as valid, 
and the unwrapping algorithm returns it. If there is not a match, 
then the key is rejected, and the unwrapping algorithm returns an 
error. 


The exact properties achieved by this integrity check depend on the 
definition of the initial value. Different applications may call for 
somewhat different properties; for example, whether there is need to 
determine the integrity of key data throughout its lifecycle or just 
when it is unwrapped. This specification defines a default initial 
value that supports integrity of the key data during the period it is 
wrapped (2.2.3.1). Provision is also made to support alternative 
initial values (in 2.2.3.2). 


2.2.3.1 Default Initial Value 


The default initial value (IV) is defined to be the hexadecimal 
constant: 


A[0] = IV = A6A6A6A6A6A6A6A6 


The use of a constant as the IV supports a strong integrity check on 
the key data during the period that it is wrapped. If unwrapping 
produces A[0] = A6A6A6A6A6A6A6A6, then the chance that the key data 
is corrupt is 2^-64. If unwrapping produces A[0] any other value, 
then the unwrap must return an error and not return any key data. 


2.2.3.2 Alternative Initial Values 


When the key wrap is used as part of a larger key management protocol 
or system, the desired scope for data integrity may be more than just 
the key data or the desired duration for more than just the period 
that it is wrapped. Also, if the key data is not just an AES key, it 
may not always be a multiple of 64 bits. Alternative definitions of 
the initial value can be used to address such problems. NIST will 
define alternative initial values in future key management 
publications as needed. In order to accommodate a set of 
alternatives that may evolve over time, key wrap implementations that 
are not application-specific will reguire some flexibility in the way 
that the initial value is set and tested. 
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3. Object Identifiers 


NIST has assigned the following object identifiers to identify the 
key wrap algorithm with the default initial value specified in 


2 Ds Sisi 


KEK AES key sizes. 


aes 


OBJECT IDENTIFIER  ::- 


us (840) 


organization(1) 


id-aes128-wrap OBJECT IDENTIFIER 


gov (101) 


( joint-iso-itu-t(2) c 


csor(3) nistAlg 


(aes 5 ) 


id-aes192-wrap OBJECT IDENTIFIER = (aes 25 } 
id-aes256-wrap OBJECT IDENTIFIER ::= ( aes 45 } 
4. Test Vectors 


One object identifier is assigned for use with each of the 


ountry (16) 


orithm(4) 1 } 


The examples in this section were generated using the index-based 


implementation of the key wrap algorithm. 


The use of t 


his approach 


allows a straightforward software implementation of the key wrap 
algorithm. 


4.1 Wrap 128 bits of Key Data with a 128-bit KEK 


Input: 

KEK: 000102030405060708090A0B0COD0E0F 

Key Data: 00112233445566778899AABBCCDDEEFF 

Wrap: 

Step t A RI R2 

1 

In A6A6A6A6A6A6A6A6 0011223344556677 8899AABBCCDDEEFF 

Enc F4740052E82A2251 74CE86FBD7B805E7 8899AABBCCDDEEFF 

XorT F4740052E82A2250 74CE86FBD7B805E7 8899AABBCCDDEEFF 

2 

In F4740052E82A2250 74CE86FBD7B805E7 8899AABBCCDDEEFF 

Enc O06BA4EBDE7768D0B 74CE86FBD7B805E7 D132EE38147E76F8 

XorT 06BA4EBDE7768D09 74CE86FBD7B805E7 D132EE38147E76F8 

3 

In O6BA4EBDE7768D09 74CE86FBD7B805E7 D132EE38147E76F8 

Enc FC967627BE937208 FE6E8D679C5D3460 D132EE38147E76F8 

XorT FC967627BE93720B FE6E8D679C5D3460 D132EE38147E76F8 
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In FC967627BE93720B FE6E8D679C5D3460 D132EE38147E76F8 
Enc 5896EA9028EE203B FE6E8D679C5D3460 07B2BD973E36A6FC 
XorT 5896EA9028EE203F FE6E8D679C5D3460 07B2BD973E36A6FC 
5 
In 5896EA9028EE203F FE6E8D679C5D3460 07B2BD973E36A6FC 
Enc  93AEA71B258D90C3 25F5A3ADC2195401 07B2BD973E36A6FC 
XorT 93AEA71B258D90C6 25F5A3ADC2195401 07B2BD973E36A6FC 
6 
In 93AEA71B258D90C6 25F5A3ADC2195401 07B2BD973E36A6FC 
Enc E3EE986344D878F7 25F5A3ADC2195401 F14863BB1E9CA90A 
XorT E3EE986344D878F1 25F5A3ADC2195401 F14863BB1E9CA90A 
7 
In E3EE986344D878F1 25F5A3ADC2195401 F14863BB1E9CA90A 
Enc 2BFC21B2C20E4006 B556D35ED8CEF052 F14863BB1E9CA90A 
XorT 2BFC21B2C20E4001 B556D35ED8CEF052 F14863BB1E9CA90A 
8 
In 2BFC21B2C20E4001 B556D35ED8CEF052 F14863BB1E9CA90A 
Enc 4BE8CE99C0A43A7D B556D35ED8CEF052 64BAE5818D0570BB 
XorT 4BE8CE99C0A43A75 B556D35ED8CEF052 64BAE5818D0570BB 
9 
In 4BE8CE99C0A43A75 B556D35ED8CEF052 64BAE5818D0570BB 
Enc EBE1CE91067024F3 BE114B343EB00981 64BAE5818D0570BB 
XorT EBE1CE91067024FA BE114B343EB00981 64BAE5818D0570BB 
10 
In EBE1CE91067024FA BE114B343EB00981 64BAE5818D0570BB 
Enc 5A9C7B1F5B1C3B46 BE114B343EB00981 4FD3D2B7D74FBB42 
XorT 5A9C7B1F5B1C3B4C BE114B343EB00981 4FD3D2B7D74FBB42 
TI 
In 5A9C7B1F5B1C3B4C BE114B343EB00981 4FD3D2B7D74FBB42 
Enc 93B71967EED41FFC AEF34BD8FB5A7B82 4FD3D2B7D74FBB42 
XorT 93B71967EED41FF7 AEF34BD8FB5A7B82 4FD3D2B7D74FBB42 
12 
In 93B71967EED41FF7 AEF34BD8FB5A7B82 4FD3D2B7D74FBB42 
Enc 1FA68B0A8112B44B AEF34BD8FB5A7B82 9D3E862371D2CFE5 
XorT 1FA68B0A8112B447 AEF34BD8FB5A7B82 9D3E862371D2CFE5 
Output: 
Ciphertext: 1FA68B0A8112B447 AEF34BD8FB5A7B82 9D3E8623 
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Unwrap 

Step t A RI 

12 

In 1FA68B0A8112B447 AEF34BD8FB5A7B82 

XorT 1FA68B0A8112B44B AEF34BD8FB5A7B82 

Dec 93B71967EED41FF7 AEF34BD8FB5A7B82 

LT 

In 93B71967EED41FF7 AEF34BD8FB5A7B82 

XorT 93B71967EED41FFC AEF34BD8FB5A7B82 

Dec 5A9C7B1F5B1C3B4C BE114B343EB00981 

10 

In 5A9C7B1F5B1C3B4C BE114B343EB00981 

XorT SA9C7B1F5B1C3B46 BE114B343EB00981 

Dec EBE1CE91067024FA BE114B343EB00981 

9 

In EBE1CE91067024FA BE114B343EB00981 

XorT EBE1CE91067024F3 BE114B343EB00981 

Dec 4BE8CE99C0A43A75 B556D35ED8CEF052 

8 

In 4BE8CE99C0A43A75 B556D35ED8CEF052 

XorT 4BE8CE99C0A43A7D B556D35ED8CEF052 

Dec 2BFC21B2C20E4001 B556D35ED8CEF052 

7 

In 2BFC21B2C20E4001 B556D35ED8CEFO52 

XorT 2BFC21B2C20E4006 B556D35ED8CEF052 

Dec E3EE986344D878F1 25F5A3ADC2195401 

6 

In E3EE986344D878F1 25F5A3ADC2195401 

XorT E3EE986344D878F7 25F5A3ADC2195401 

Dec 93AEA71B258D90C6 25F5A3ADC2195401 

2 

In 93AEA71B258D90C6 25F5A3ADC2195401 

XorT 93AEA71B258D90C3 25F5A3ADC2195401 

Dec 5896EA9028EE203F FE6E8D679C5D3460 

4 

In 5896EA9028EE203F FE6E8D679C5D3460 

XorT 5896EA9028EE203B FE6E8D679C5D3460 

Dec FC967627BE93720B FE6E8D679C5D3460 
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R2 


9D3E862371D2CFE5 
9D3E862371D2CFE5 
4FD3D2B7D74FBB42 


D74FBB42 
D74FBB42 
D74FBB42 


4FD3D2B7 
4FD3D2B7 
4FD3D2B7 


4FD3D2B7D74FBB42 
4FD3D2B7D74FBB42 
64BAE5818D0570BB 


64BAE5818D0570BB 
64BAE5818D0570BB 
64BAE5818D0570BB 


64BAE5818D0570BB 
64BAE5818D0570BB 
F14863BB1E9CA90A 


F14863BB1E9CA90A 
F14863BB1E9CA90A 
F14863BB1E9CA90A 


F14863BB1E9CA90A 
F14863BB1E9CA90A 
07B2BD973E36A6FC 


07B2BD973E36A6FC 
07B2BD973E36A6FC 
07B2BD973E36A6FC 


07B2BD973E36A6FC 
07B2BD973E36A6FC 
D132EE38147E76F8 
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3 
In FC967627BE93720B 
XorT FC967627BE937208 
Dec 06BA4EBDE7768D09 
2 
In 06BA4EBDE7768D09 
XorT 06BA4EBDE7768D0B 
Dec F4740052E82A2250 
1 
In F4740052E82A2250 
XorT F4740052E82A2251 
Dec A6A6A6A6A6A6A6A6 
Plaintext 
Output: 
Key Data: 


FE6E8D679C5D3460 
FE6E8D679C5D3460 
74CE86FBD7B805E7 


74CE86FBD7B805E7 
74CE86FBD7B805E7 
74CE86FBD7B805E7 


74CE86FBD7B805E7 
74CE86FBD7B805E7 
0011223344556677 


D132EE38147E76F8 
D132EE38147E76F8 
D132EE38147E76F8 


D132EE38147E76F8 
D132EE38147E76F8 
8899AABBCCDDEEFF 


8899AABBCCDDEEFF 
8899AABBCCDDEEFF 
8899AABBCCDDEEFF 


00112233445566778899AABBCCDDEEFF 
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A6A6A6A6A6A6A6A6 0011223344556677 8899AABBCCDDEEFF 


000102030405060708090A0B0C0OD0E0F1011121314151617 


Input: 

KEK: 

Key Data: 

Wrap: 

Step t A 

In A6A6A6A6A6A6A6A6 
Enc DFE8FD5D1A3786A7 
XorT DFE8FD5D1A3786A6 
2 

In DFE8FD5D1A3786A6 
Enc  9D9B32B9ED742E02 
XorT 9D9B32B9ED742E00 
3 

In 9D9B32B9ED742E00 
Enc 7B8E343CA51CF8AB 
XorT 7B8E343CA51CF8A8 
4 

In 7B8E343CA51CF8A8 
Enc  02A97C5897140595 
XorT 02A97C5897140591 
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R1 
0011223344556677 
351D385096CCFB29 
351D385096CCFB29 


351 
351 
351 


D385096CCFB29 
D385096CCFB29 
D385096CCFB29 


351D385096CCFB29 
BC164F51E20CC983 
BC164F51E20CC983 


BC164F51E20CC983 
BC164F51E20CC983 
BC164F51E20CC983 
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00112233445566778899AABBCCDDEEFF 


R21 
8899AABBCCDDEEFF 
8899AABBCCDDEEFF 
8899AABBCCDDEEFF 


8899AABBCCDDEEFF 
51F22F3286758A2D 
51F22F3286758A2D 


51F22F3286758A2D 
51F22F3286758A2D 
51F22F3286758A2D 


51F22F3286758A2D 
05FC2D8F8FF4B919 
05FC2D8F8FF4B919 
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> 
In 02A97C5897140591 
Enc 15D4B63F66583817 
XorT 15D4B63F66583812 
6 
In 15D4B63F66583812 
Enc AE2D0B76A6951EEA 
XorT AE2D0B76A6951EEC 
7 
In AE2D0B76A6951EEC 
Enc 79F849444F4B8AA8 
XorT 79F849444F4B8AAF 
8 
In 79F849444F4B8AAF 
Enc  5933A9195B5F5E21 
XorT 5933A9195B5F5E29 
9 
In 5933A9195B5F5E29 
Enc 57ADA800299C2E85 
XorT 57ADA800299C2E8C 
10 
In 57ADA800299C2E8C 
Enc  BF17BD6A9BC80163 
XorT BF17BD6A9BC80169 
11 
In BF17BD6A9BC80169 
Enc  B68BF270AE81544F 
XorT B68BF270AE815444 
12 
In B68BF270AE815444 
Enc 96778B25AE6CA439 
XorT 96778B25AE6CA435 
Output: 
Ciphertext: 

Schaad & Housley 


BC164F51E20CC983 
429487269D3A0016 
429487269D3A0016 


429487269D3A0016 
429487269D3A0016 
429487269D3A0016 


429487269D3A0016 
D40B091CDBAC0340 
D40B091CDBAC0340 


D40B091CDBAC0340 
D40B091CDBAC0340 
D40B091CDBAC0340 


D40B091CDBAC0340 
4D5B3DFE7C04ABBA 
4D5B3DFE7C04ABBA 


4D5B3DFE7C04ABBA 
D5B3DFE7C04ABBA 


4D5B3DFE7C04ABBA 


心 


4D5B3DFE7C04ABBA 
F92B5B97C050AED2 
F92B5B97C050AED2 


05FC2D8F8FF4B919 
05FC2D8F8FF4B919 
05FC2D8F8FF4B919 


I 


05FC2D8F8FF4B919 
05A2D8FB4DD5BD7A 
05A2D8FB4DD5BD7A 


T 


0542 
0542 
0542 


D8FB4D 
D8FB4D 
D8FB4D 


D5BD7A 
D5BD7A 
D5BD7A 


05A2D8FB4DD5BD7A 
89F0D6C06F8CA9B4 
89F0D6C06F8CA9B4 


89F0D6C06F8CA9B4 
89F0D6C06F8CA9B4 
89F0D6C06F8CA9B4 


89F0D6C06F8CA9B4 
EB24CCFA52EA9078 
EB24CCFA52EA9078 


EB24CCFA52EA9078 
EB24CCFA52EA9078 
EB24CCFA52EA9078 


F92B5B97C050AED2 


EB24CCFA52EA9078 


F92B5B97CO5OAED2 
F92B5B97C050AED2 


Informational 


468AB8A17AD84E5D 
468AB8A17AD84E5D 


September 2002 


96778B25AE6CA435 F92B5B97C050AEDZ 468AB8A17AD84E5D 
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AES Key Wrap Algorithm 


RFC 3394 
Unwrap: 
Step t A 
12 
In 96778B25AE6CA435 
XorT 96778B25AE6CA439 
Dec B68BF270AE815444 
11 
In B68BF270AE815444 
XorT B68BF270AE81544F 
Dec BF17BD6A9BC80169 
10 
In BF17BD6A9BC80169 
XorT BF17BD6A9BC80163 
Dec 57ADA800299C2E8C 
9 
In 57ADA800299C2E8C 
XorT 57ADA800299C2E85 
Dec 5933A9195B5F5E29 
8 
In 5933A9195B5F5E29 
XorT 5933A9195B5F5E21 
Dec 79F849444F4B8AAF 
7 
In 79F849444F4B8AAF 
XorT 79F849444F4B8AA8 
Dec AE2D0B76A6951EEC 
6 
In AE2D0B76A6951EEC 
XorT AE2D0B76A6951EEA 
Dec 15D4B63F66583812 
2 
In 15D4B63F66583812 
XorT 15D4B63F66583817 
Dec 02A97C5897140591 
4 
In 02A97C5897140591 
XorT 02A97C5897140595 
Dec 7B8E343CA51CF8A8 
Schaad & Housley 


RI 


F92B5B97C050AED2 
F92B5B97C050AED2 
F92B5B97C050AED2 


F92B5B97C050AED2 
F92B5B97C050AED2 
4D5B3DFE7C04ABBA 


4D5B3DFE7C04ABBA 
4D5B3DFE7C04ABBA 
4D5B3DFE7C04ABBA 


4D5B3DFE7C04ABBA 
4D5B3DFE7C04ABBA 
D40B091CDBAC0340 


D40B091CDBAC0340 
D40B091CDBAC0340 
D40B091CDBAC0340 


D40B091CDBAC0340 
D40B091CDBAC0340 
429487269D3A0016 


429487269D3A0016 
429487269D3A0016 
429487269D3A0016 


429487269D3A0016 
429487269D3A0016 
BC164F51E20CC983 


BC164F51E20CC983 
BC164F51E20CC983 
BC164F51E20CC983 


Informational 


R2 


468AB8A17AD84E5D 
468AB8A17AD84E5D 
EB24CCFA52EA9078 


EB24CCFA52EA9078 
EB24CCFA52EA9078 
EB24CCFA52EA9078 


EB24CCFA52EA9078 
EB24CCFA52EA9078 
89F0D6C06F8CA9B4 


89F0D6C06F8CA9B4 
89F0D6C06F8CA9B4 
89F0D6C06F8CA9B4 


89F0 
89F0 
05A2 


D6C06F8CA9B4 
D6C06F8CA9B4 
D8FB4DD5BD7A 


05A2D8FB4DD5BD7A 
05A2D8FB4DD5BD7A 
05A2D8FB4DD5BD7A 


05A2D8FB4DD5BD7A 
05A2D8FB4DD5BD7A 
05FC2D8F8FF4B919 


05FC2D8F8FF4B919 
05FC2D8F8FF4B919 
05FC2D8F8FF4B919 


05FC2D8F8FF4B919 
05FC2D8F8FF4B919 
51F22F3286758A2D 
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AES Key Wrap Algorithm 


7B8E343CA51CF8A8 
7B8E343CA51CF8AB 
9D9B32B9ED742E00 


9D9B32B9ED742E00 
9D9B32B9ED742E02 
DFE8FD5D1A3786A6 


DFE8FD5D1A3786A6 
DFE8FD5D1A3786A7 
A6A6A6A6A6A6A6A6 


BC164F51E20CC983 
BC164F51E20CC983 
351D385096CCFB29 


351D385096CCFB29 
351D385096CCFB29 
351D385096CCFB29 


351D385096CCFB29 
351D385096CCFB29 
0011223344556677 


51F22F3286758A2D 
51F22F3286758A2D 
51F22F3286758A2D 


51F22F3286758A2D 
51F22F3286758A2D 
8899AABBCCDDEEFF 


8899AABBCCDDEEFF 
8899AABBCCDDEEFF 
8899AABBCCDDEEFF 


September 2002 


Plaintext A6A6A6A6A6A6A6A6 0011223344556677 8899AABBCCDDEEFF 


Output: 


Key Data: 


00112233445566778899AABBCCDDEEFF 


4.3 Wrap 128 bits of Key Data with a 256-bit KEK 


Input: 


KEK:000102030405060708090A0 


Key Data: 

Wrap: 

Step t A 

1 

In A6A6A6A6A6A6A6A6 
Enc 794314D454E3FDE1 
XorT 794314D454E3FDEO 
2 

In 794314D454E3FDEO 
Enc D450EA5C5BBCB561 
XorT D450EA5C5BBCB563 
3 

In D450EA5C5BBCB563 
Enc 85DBDF1879D5C0A5 
XorT 85DBDF1879D5C0A6 


Schaad & Housley 


R1 


0011223344556677 
F661BD9F31FBFA31 
F661BD9F31FBFA31 


F661BD9F31FBFA31 
F661BD9F31FBFA31 
F661BD9F31FBFA31 


F661BD9F31FBFA31 
5602001BFA07AD8B 
5602001BFA07AD8B 


Informational 


R2 


8899AABBCCDDEEFF 
8899AABBCCDDEEFF 
8899AABBCCDDEEFF 


8899AABBCCDDEEFF 
F60EOCDB7F429FE8 
F60EOCDB7F429FE8 


F60EOCDB7F429FE8 
F60EOCDB7F429FE8 
F60EOCDB7F429FE8 


BOCODOEOF101112131415161718191A1B1C1D1E1F 
001122334455667788 9 9AABBCCDDEEFF 
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RFC 3394 
4 
In 85DBDF1879D5C0A6 
Enc  738C291128B7226D 
XorT 738C291128B72269 
5 
In 738C291128B72269 
Enc  2656A02DFFF054DC 
XorT 2656A02DFFF054D9 
6 
In 2656A02DFFF054D9 
Enc  DDFDOCOE8B52A63A 
XorT DDFDOCOE8B52A63C 
7 
In DDFDOCOE8B52A63C 
Enc 39AB00D4AE4399EA 
XorT 39AB00D4AE4399ED 
8 
In 39AB00D4AE4399ED 
Enc 4CE414878463EAAC 
XorT 4CE414878463EAA4 
9 
In 4CE414878463EAA4 
Enc FBB44DB106AA0789 
XorT FBB44DB106AA0780 
10 
In FBB44DB106AA0780 
Enc 877112A7308ADCC5 
XorT 877112A7308ADCCF 
11 
In 877112A7308ADCCF 
Enc 78E40190807CC151 
XorT 78E40190807CC15A 
12 
In 78E40190807CC15A 
Enc  64E8C3F9CEOF5BAE 
XorT 64E8C3F9CEOF5BA2 
Output: 
Ciphertext: 

Schaad & Housley 


5602001BFA07AD8B 
5602001BFA07AD8B 
5602001BFA07AD8B 


5602001BFA07AD8B 
F4DF378183E3D5B2 
F4DF378183E3D5B2 


F4DF378183E3D5B2 
F4DF378183E3D5B2 
F4DF378183E3D5B2 


F4DF378183E3D5B2 
5271D5CED80F34ED 
5271D5CED80F34ED 


5271D5CED80F34ED 
5271D5CED80F34ED 
5271D5CED80F34ED 


I 


5271D5CED80F34ED 
0DF7E50829123648 
0DF7E50829123648 


0DF7E50829123648 
0DF7E50829123648 
0DF7E50829123648 


0DF7E50829123648 
63E9777905818A2A 
63E9777905818A2A 


63E9777905818A2A 
63E9777905818A2A 
63E9777905818A2A 


Informational 


F60EOCDB7F429FE8 
58924F777C3F678C 
58924F777C3F678C 


58924F777C3F678C 
58924F777C3F678C 
58924F777C3F678C 


58924F777C3F678C 
91AC1D36A964F41B 
91AC1D36A964F41B 


91AC1D36A964F41B 
91AC1D36A964F41B 
91AC1D36A964F41B 


91AC1D36A964F41B 
67D8ED899E7929B8 
67D8ED899E7929B8 


67D8ED899E7929B8 
67D8ED899E7929B8 
67D8ED899E7929B8 


LH 


67D8ED899E7929B8 
3472D5993D318FD2 
3472D5993D318FD2 


3472 
3472 
3472 


D5993D318FD2 
D5993D318FD2 
D5993D318FD2 


3472D5993D318FD2 
93C8191E7D6E8AE7 
93C8191E7D6E8AE7 


September 2002 


64E8C3F9CEOF5BA2 63E9777905818A2A 93C8191E7D6E8AE7 
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RFC 3394 
Unwrap 
Step t A 
12 
In 64E8C3F9CEOFSBA2 
XorT 64E8C3F9CEOF5BAE 
Dec 78E40190807CC15A 
11 
In 78E40190807CC15A 
XorT 78E40190807CC151 
Dec 877112A7308ADCCF 
10 
In 877112A7308ADCCF 
XorT 877112A7308ADCC5 
Dec FBB44DB106AA0780 
9 
In FBB44DB106AA0780 
XorT FBB44DB106AA0789 
Dec 4CE414878463EAA4 
8 
In 4CE414878463EAA4 
XorT 4CE414878463EAAC 
Dec 39AB00D4AE4399ED 
7 
In 39AB00D4AE4399ED 
XorT 39AB00D4AE4399EA 
Dec DDFDOCOE8B52A63C 
6 
In DDFDOCOE8B52A63C 
XorT DDFDOCOE8B52A63A 
Dec 2656A02DFFF054D9 
2 
In 2656A02DFFF054D9 
XorT 2656A02DFFF054DC 
Dec 738C291128B72269 
4 
In 738C291128B72269 
XorT 738C291128B7226D 
Dec 85DBDF1879D5C0A6 


Schaad & Housley 


R1 


63E9777905818A2A 
63E9777905818A2A 
63E9777905818A2A 


63E9777905818A2A 
63E9777905818A2A 
0DF7E50829123648 


0DF7E50829123648 
DF7E50829123648 


0DF7E50829123648 


0DF7E50829123648 
0DF7E50829123648 
5271D5CED80F34ED 


5271D5CED80F34ED 
5271D5CED80F34ED 
5271D5CED80F34ED 


5271D5CED80F34ED 
5271D5CED80F34ED 
F4DF378183E3D5B2 


F4DF378183E3D5B2 
F4DF378183E3D5B2 
F4DF378183E3D5B2 


F4DF378183E3D5B2 
F4DF378183E3D5B2 
5602001BFA07AD8B 


5602001BFA07AD8B 
5602001BFA07AD8B 
5602001BFA07AD8B 


Informational 


R2 


93C8191E7D6E8AE7 
93C8191E7D6E8AE7 
3472D5993D318FD2 


3472 
3472 
3472 


D5993D318FD2 
D5993D318FD2 
D5993D318FD2 


3472D5993D318FD2 
3472D5993D318FD2 
67D8ED899E7929B8 


67D8ED899E7929B8 
67D8ED899E7929B8 
67D8ED899E7929B8 


67D8ED899E7929B8 
67D8ED899E7929B8 
91AC1D36A964F41B 


91AC1D36A964F41B 
91AC1D36A964F41B 
91AC1D36A964F41B 


91AC1D36A964F41B 
91AC1D36A964F41B 
58924F777C3F678C 


58924F777C3F678C 
58924F777C3F678C 
58924F777C3F678C 


58924F777C3F678C 
58924F777C3F678C 
F60EOCDB7F429FE8 
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In 
XorT 
Dec 


AES Key Wrap Algorithm 


85DBDF1879D5C0A6 
85DBDF1879D5C0A5 
D450EA5C5BBCB563 


D450EA5C5BBCB563 
D450EA5C5BBCB561 
794314D454E3FDEO 


794314D454E3FDEO 
794314D454E3FDE1 
A6A6A6A6A6A6A6A6 


5602001BFA07AD8B 
5602001BFA07AD8B 
F661BD9F31FBFA31 


F661BD9F31FBFA31 
F661BD9F31FBFA31 
F661BD9F31FBFA31 


F661BD9F31FBFA31 
F661BD9F31FBFA31 
0011223344556677 


F60EOCDB7F429FE8 
F60EOCDB7F429FE8 
F60EOCDB7F429FE8 


F60EOCDB7F429FE8 
F60EOCDB7F429FE8 
8899AABBCCDDEEFF 


8899AABBCCDDEEFF 
8899AABBCCDDEEFF 
8899AABBCCDDEEFF 


September 2002 


Plaintext A6A6A6A6A6A6A6A6 0011223344556677 8899AABBCCDDEEFF 


Output: 


Key Data: 


00112233445566778899AABBCCDDEEFF 


4.4 Wrap 192 bits of Key Data with a 192-bit KEK 


000102030405060708090A0B0C0D0EOF1011121314151617 


Input: 

KEK: 

Key Data: 

Wrap: 

Step t A/R3 

1 

In A6A6A6A6A6A6A6A6 
0001020304050607 

Enc DFE8FD5D1A3786A7 
0001020304050607 

XorT DFE8FD5D1A3786A6 
0001020304050607 

2 

In DFE8FD5D1A3786A6 
0001020304050607 

Enc  9D9B32B9ED742E02 
0001020304050607 

XorT 9D9B32B9ED742E00 
0001020304050607 


Schaad & Housley 


R1 


0011223344556677 


351D385096CCFB29 


351D385096CCFB29 


351D385096CCFB29 


351D385096CCFB29 


351D385096CCFB29 


Informational 


R2 


8899AABBCCDDEEFF 


8899AABBCCDDEEFF 


8899AABBCCDDEEFF 


8899AABBCCDDEEFF 


51F22F3286758A2D 


51F22F3286758A2D 


00112233445566778899AABBCCDDEEFF0001020304050607 
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AES Key Wrap Algorithm 


9D9B32B9ED742E00 
0001020304050607 
2C8E19A519025B7C 
FF540E514DE120A3 
2C8E19A519025B7F 
FF540E514DE120A3 


2C8E19A519025B7F 
FF540E514DE120A3 
E727C7BDF822602E 
FF540E514DE120A3 
E727C7BDF822602A 
FF540E514DE120A3 


E727C7BDF822602A 
FF540E514DE120A3 
15B61F7B25D51700 
FF540E514DE120A3 
15B61F7B25D51705 
FF540E514DE120A3 


15B61F7B25D51705 
FF540E514DE120A3 
A187755AEA64719C 
D1E708FD13778787 
A187755AEA64719A 
D1E708FD13778787 


A187755AEA64719A 
D1E708FD13778787 
5A994895D81644B7 
D1E708FD13778787 
5A994895D81644B0 


351D385096CCFB29 


351D385096CCFB29 


351D385096CCFB29 


351D385096CCFB29 


A08DAA041D17BBBA 


A08DAA041D17BBBA 


A08DAA041D17BBBA 


A08DAA041D17BBBA 


A08DAA041D17BBBA 


A08DAA041D17BBBA 


A08DAA041D17BBBA 


A08DAA041D17BBBA 


A08DAA041D17BBBA 


926ED65A9E853FD9 


926ED65A9E853FD9 


D1E708FD13778787 


5A994895D81644B0 
D1E708FD13778787 
864F408C8AB8CDCF 
D1E708FD13778787 
864F408C8AB8CDC7 
D1E708FD13778787 


Schaad & Housley 


926ED65A9E853FD9 


926ED65A9E853FD9 


926ED65A9E853FD9 


Informational 


51F22F3286758A2D 


51F22F3286758A2D 


51F22F3286758A2D 


51F22F3286758A2D 


51F22F3286758A2D 


51F22F3286758A2D 


51F22F3286758A2D 


AE82BC1118A5DEA4 


AE82BC1118A5DEA4 


AE82BC1118A5DEA4 


AE82BC1118A5DEA4 


AE82BC1118A5DEA4 


AE82BC1118A5DEA4 


AE82BC1118A5DEA4 


AE82BC1118A5DEA4 


AE82BC1118A5DEA4 


552A09E141D08AE3 


552A09E141D08AE3 
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Enc 


XorT 


11 


In 


Enc 


XorT 


12 


In 


Enc 


XorT 


13 


In 


Enc 


XorT 


14 


In 


Enc 


XorT 


Schaad & 


864F408C8AB8CDC7 
D1E708FD13778787 
53F4373F575EB7A4 
ED5E8456E61BD295 
53F4373F575EB7AD 
ED5E8456E61BD295 


53F4373F575EB7AD 
ED5E8456E61BD295 
9EAA4CDAO0B1BA5FF 
ED5E8456E61BD295 
9EAA4CDAO0B1BA5F5 
ED5E8456E61BD295 


9EAA4CDAO0B1BA5F5 
ED5E8456E61BD295 
B1B9902C68E0EB52 
ED5E8456E61BD295 
B1B9902C68E0EB59 
ED5E8456E61BD295 


B1B9902C68E0EB59 
ED5E8456E61BD295 
FCE591D77709A6EO 
463437433A93EFE5 
FCE591D77709A6EC 
463437433A93EFE5 


FCE591D77709A6EC 
463437433A93EFE5 
428428D2BD88CF58 
463437433A93EFE5 
428428D2BD88CF55 
463437433A93EFE5 


428428D2BD88CF55 
463437433A93EFE5 
6AC861AB961DA578 
463437433A93EFE5 
6AC861AB961DA576 
463437433A93EFE5 


Housley 


926ED65A9E853FD9 


926ED65A9E853FD9 


926ED65A9E853FD9 


926ED65A9E853FD9 


98883EDC6B080FB5 


98883EDC6B080FB5 


98883EDC6B080FB5 


98883EDC6B080FB5 


98883EDC6B080FB5 


98883EDC6B080FB5 


98883EDC6B080FB5 


98883EDC6B080FB5 


98883EDC6B080FB5 


C46965F34EFB2261 


C46965F34EFB2261 


C46965F34EFB2261 


C46965F34EFB2261 


C46965F34EFB2261 


Informational 


AES Key Wrap Algorithm 


552A09E141D08AE3 


552A09E141D08AE3 


552A09E141D08AE3 


552A09E141D08AE3 


552A09E141D08AE3 


552A09E141D08AE3 


552A09E141D08AE3 


63F6D88A0663FEF9 


63F6D88A0663FEF9 


63F6D88A0663FEF9 


63F6D88A0663FEF9 


63F6D88A0663FEF9 


63F6D88A0663FEF9 


63F6D88A0663FEF9 


63F6D88A0663FEF9 


63F6D88A0663FEF9 


56E3CEE892BBEFC4 


56E3CEE892BBEFC4 
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RFC 3394 AES Key Wrap Algorithm 

1:5 

In 6AC861AB961DA576 C46965F34EFB2261 56E3CEE892BBEFC4 
463437433A93EFE5 

Enc E80DB49CC9A1EA61 C46965F34EFB2261 56E3CEE892BBEFC4 
84943C8C67FCFD53 

XorT E80DB49CC9A1EA6E C46965F34EFB2261 56E3CEE892BBEFC4 
84943C8C67FCFD53 

16 

In E80DB49CC9A1EA6E C46965F34EFB2261 56E3CEE892BBEFC4 
84943C8C67FCFD53 

Enc ABEE3534AC465C2C 68F24EC260743EDC 56E3CEE892BBEFC4 
84943C8C67FCFD53 

XorT ABEE3534AC465C3C 68F24EC260743EDC 56E3CEE892BBEFC4 
84943C8C67FCFD53 

T 

In ABEE3534AC465C3C 68F24EC260743EDC 56E3CEE892BBEFC4 
84943C8C67FCFD53 

Enc  E7CC8D8CEDE62BF7 68F24EC260743EDC E1C6C7DDEE725A93 
84943C8C67FCFD53 

XorT E7CC8D8CEDE62BE6 68F24EC260743EDC E1C6C7DDEE725A93 
84943C8C67FCFD53 

18 

In E7CC8D8CEDE62BE6 68F24EC260743EDC E1C6C7DDEE725A93 
84943C8C67FCFD53 

Enc  031D33264E15D320 68F24EC260743EDC E1C6C7DDEE725A93 
6BA814915C6762D2 

XorT 031D33264E15D332 68F24EC260743EDC E1C6C7DDEE725A93 
6BA814915C6762D2 

Output: 

Ciphertext 031D33264E15D332 68F24EC260743EDC E1C6C7DDEE725A93 

6BA814915C6762D2 

Unwrap: 

Step t A/R3 RI R2 

18 

In 031D33264E15D332 68F24EC260743EDC E1C6C7DDEE725A93 
6BA814915C6762D2 

XorT 031D33264E15D320 68F24EC260743EDC E1C6C7DDEE725A93 
6BA814915C6762D2 

Dec E7CC8D8CEDE62BE6 68F24EC260743EDC E1C6C7DDEE725A93 
84943C8C67FCFD53 

Schaad & Housley Informational 
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17 


In 


XorT 


Dec 


16 


In 


XorT 


Dec 


15 


In 


XorT 


Dec 


14 


In 


XorT 


Dec 


13 


In 


XorT 


Dec 


12 


In 


XorT 


Dec 


AES Key Wrap Algorithm 


E7CC8D8CEDE62BE6 
84943C8C67FCFD53 
E7CC8D8CEDE62BF7 
84943C8C67FCFD53 
ABEE3534AC465C3C 
84943C8C67FCFD53 


ABEE3534AC465C3C 
84943C8C67FCFD53 
ABEE3534AC465C2C 
84943C8C67FCFD53 
E80DB49CC9A1EA6E 
84943C8C67FCFD53 


E80DB49CC9A1EA6E 
84943C8C67FCFD53 
E80DB49CC9A1EA61 
84943C8C67FCFD53 
6AC861AB961DA576 
463437433A93EFE5 


6AC861AB961DA576 
463437433A93EFE5 
6AC861AB961DA578 
463437433A93EFE5 
428428D2BD88CF55 
463437433A93EFE5 


428428D2BD88CF55 
463437433A93EFE5 
428428D2BD88CF58 
463437433A93EFE5 
FCE591D77709A6EC 
463437433A93EFE5 


FCE591D77709A6EC 
463437433A93EFE5 
FCE591D77709A6EO 
463437433A93EFE5 
B1B9902C68EO0EB59 
ED5E8456E61BD295 


Schaad & Housley 


68F24EC260743EDC 


68F24EC260743EDC 


68F24EC260743EDC 


E1C6C7DDEE725A93 


E1C6C7DDEE725A93 


56E3CEE892BBEFC4 


68F24EC260743EDC 


56E3CEE892BBEFC4 


68F24EC260743EDC 


56E3CEE892BBEFC4 


C46965F34EFB2261 


C46965F34EFB2261 


C46965F34EFB2261 


C46965F34EFB2261 


C46965F34EFB2261 


C46965F34EFB2261 


C46965F34EFB2261 


C46965F34EFB2261 


C46965F34EFB2261 


98883EDC6B080FB5 


98883EDC6B080FB5 


98883EDC6B080FB5 


98883EDC6B080FB5 


Informational 


56E3CEE892BBEFC4 


56E3CEE892BBEFC4 


56E3CEE892BBEFC4 


56E3CEE892BBEFC4 


56E3CEE892BBEFC4 


56E3CEE892BBEFC4 


63F6D88A0663FEF9 


63F6D88A0663FEF9 


63F6D88A0663FEF9 


63F6D88A0663FEF9 


63F6D88A0663FEF9 


63F6D88A0663FEF9 


63F6D88A0663FEF9 
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1:1 
In 


XorT 


Dec 


AES Key Wrap Algorithm 


B1B9902C68EO0EB59 
ED5E8456E61BD295 
B1B9902C68EO0EB52 
ED5E8456E61BD295 
9EAA4CDAÓBIBASF'5 
ED5E8456E61BD295 


9EAA4CDAO0B1BA5F5 
ED5E8456E61BD295 
SEAAACDAOBIBASFF 
ED5E8456E61BD295 
53F4373F575EB7AD 
ED5E8456E61BD295 


53F4373F575EB7AD 
ED5E8456E61BD295 
53F4373F575EB7A4 
ED5E8456E61BD295 
864F408C8AB8CDC7 
D1E708FD13778787 


864F408C8AB8CDC7 
D1E708FD13778787 
864F408C8AB8CDCF 
D1E708FD13778787 
5A994895D81644B0 
D1E708FD13778787 


98883EDC6B080FB5 


98883EDC6B080FB5 


98883EDC6B080FB5 


98883EDC6B080FB5 


98883EDC6B080FB5 


926ED65A9E853FD9 


926ED65A9E853FD9 


926ED65A9E853FD9 


926ED65A9E853FD9 


926ED65A9E853FD9 


926ED65A9E853FD9 


926ED65A9E853FD9 


5A994895D81644B0 
D1E708FD13778787 
5A994895D81644B7 
D1E708FD13778787 
A187755AEA64719A 
D1E708FD13778787 


A187755AEA64719A 
D1E708FD13778787 
A187755AEA64719C 
D1E708FD13778787 
15B61F7B25D51705 
FF540E514DE120A3 


Schaad & Housley 


926ED65A9E853FD9 


926ED65A9E853FD9 


A08DAA041D17BBBA 


A08DAA041D17BBBA 


A08DAA041D17BBBA 


A08DAA041D17BBBA 


Informational 


63F6D88A0663FEF9 


63F6D88A0663FEF9 


552A09E141D08AE3 


552A09E141D08AE3 


552A09E141D08AE3 


552A09E141D08AE3 


552A09E141D08AE3 


552A09E141D08AE3 


552A09E141D08AE3 


552A09E141D08A 


LH 


3 


552A09E141D08AE3 


AE82BC1118A5DEA4 


AE82BC1118A5DEA4 


AE82BC1118A5DEA4 


AE82BC1118A5DEA4 


AE82BC1118A5DEA4 


AE82BC1118A5DEA4 


AE82BC1118A5DEA4 
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A08DAA041D17BBBA 


A08DAA041D17BBBA 


A08DAA041D17BBBA 


A08DAA041D17BBBA 


A08DAA041D17BBBA 


351D385096CCFB29 


351D385096CCFB29 


351D385096CCFB29 


351D385096CCFB29 


351D385096CCFB29 


351D385096CCFB29 


351D385096CCFB29 


351D385096CCFB29 


351D385096CCFB29 


0011223344556677 


AE82BC1118A5DEA4 


AE82BC1118A5DEA4 


51F22F3286758A2D 


51F22F3286758A2D 


51F22F3286758A2D 


51F22F3286758A2D 


51F22F3286758A2D 


51F22F3286758A2D 


51F22F3286758A2D 


51F22F3286758A2D 


51F22F3286758A2D 


8899AABBCCDDEEFF 


8899AABBCCDDEEFF 


8899AABBCCDDEEFF 


8899AABBCCDDEEFF 


A6A6A6A6A6A6A6A6 0011223344556677 


8899AABBCCDDEEFF 0001020304050607 


5 

In 15B61F7B25D51705 
FF540E514DE120A3 

XorT 15B61F7B25D51700 
FF540E514DE120A3 

Dec E727C7BDF822602A 
FF540E514DE120A3 

4 

In E727C7BDF822602A 
FF540E514DE120A3 

XorT E727C7BDF822602E 
FF540E514DE120A3 

Dec 2C8E19A519025B7F 
FF540E514DE120A3 

3 

In 2C8E19A519025B7F 
FF540E514DE120A3 

XorT 2C8E19A519025B7C 
FF540E514DE120A3 

Dec 9D9B32B9ED742E00 
0001020304050607 

2 

In 9D9B32B9ED742E00 
0001020304050607 

XorT 9D9B32B9ED742E02 
0001020304050607 

Dec DFE8FD5D1A3786A6 
0001020304050607 

1 

In DFE8FD5D1A3786A6 
0001020304050607 

XorT DFE8FD5D1A3786A7 
0001020304050607 

Dec A6A6A6A6A6A6A6A6 
0001020304050607 

Plaintext 

Output: 

Key Data: 

Schaad & Housley 


Informational 


September 2002 


00112233445566778899AABBCCDDEEFF0001020304050607 
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AES Key Wrap Algorithm 


4.5 Wrap 192 bits of Key Data with a 256-bit KEK 


Input 
KEK: 


September 2002 


000102030405060708090ADBOCODOEOF101112131415161718191A1B1C1D1E1F 


Key Data: 

Wrap: 

Step t A/R3 

1 

In AGAGAGAGAGAGAG6GA6 
0001020304050607 

Enc 794314D454E3FDE1 
0001020304050607 

XorT 794314D454E3FDEO 
0001020304050607 

2 

In 794314D454E3FDEO 
0001020304050607 

Enc D450EA5C5BBCB561 
0001020304050607 

XorT D450EA5C5BBCB563 
0001020304050607 

3 

In D450EA5C5BBCB563 
0001020304050607 

Enc  9DF8F5405FBCOOC1 
6CA405593A3B5154 

XorT 9DF8F5405FBC00C2 
6CA405593A3B5154 

4 

In 9DF8F5405FBC00C2 
6CA405593A3B5154 

Enc F1D28EA6295891EC 
6CA405593A3B5154 

XorT F1D28EA6295891E8 
6CA405593A3B5154 

Schaad & Housley 


RI 


0011223344556677 


F661BD9F31FBFA31 


F661BD9F31FBFA31 


F661BD9F31FBFA31 


F661BD9F31FBFA31 


F661BD9F31FBFA31 


F661BD9F31FBFA31 


F661BD9F31FBFA31 


F661BD9F31FBFA31 


F661BD9F31FBFA31 


0CC86A4D9B9C6A31 


0CC86A4D9B9C6A31 


Informational 


R2 


8899AABBCCDDEEFF 


8899AABBCCDDEEFF 


8899AABBCCDDEEFF 


8899AABBCCDDEEFF 


F60EOCDB7F429FE8 


F60EOCDB7F429FE8 


F60EOCDB7F429FE8 


F60EOCDB7F429FE8 


F60EOCDB7F429FE8 


F60EOCDB7F429FE8 


F60EOCDB7F429FE8 


F60EOCDB7F429FE8 


00112233445566778899AABBCCDDEEFF0001020304050607 
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Enc 


XorT 


Schaad & 


AES Key Wrap Algorithm 


F1D28EA6295891E8 
6CA405593A3B5154 
BF213BFD04E8A24F 
6CA405593A3B5154 
BF213BFD04E8A24A 
6CA405593A3B5154 


BF213BFD04E8A24A 
6CA405593A3B5154 
6F85BFBDB7E880E3 
39EBC1A1A53FF55B 
6F85BFBDB7E880E5 
39EBCIA1A53FF55B 


6F85BFBDB7E880E5 
39EBCIA1A53FF55B 
D532789E4E79D819 
39EBCIA1A53FF55B 
D532789E4E79D81E 
39EBCIA1A53FF55B 


D532789E4E79D81E 
39EBCIA1A53FF55B 
2A5FFCEF1F1916D8 
39EBCIA1A53FF55B 
2A5FFCEF1F1916D0 
39EBCIA1A53FF55B 


2A5FFCEF1F1916D0 
39EBCIA1A53FF55B 
01271BA91D9804F6 
740A273461ED82C6 
01271BA91D9804FF 
740A273461ED82C6 


01271BA91D9804FF 
740A273461ED82C6 
A3223BD7237F7033 
740A273461ED82C6 
A3223BD7237F 7039 
740A273461ED82C6 


Housley 


0CC86A4D9B9C6A31 


0CC86A4D9B9C6A31 


0CC86A4D9B9C6A31 


0CC86A4D9B9C6A31 


0CC86A4D9B9C6A31 


0CC86A4D9B9C6A31 


0CC86A4D9B9C6A31 


444F92BF78E77BB1 


F60EOCDB7F429FE8 


AEBE2D5C8BF747A9 


AEBE2D5C8BF747A9 


AEBE2D5C8BF747A9 


AEBE2D5C8BF747A9 


AEBE2D5C8BF747A9 


AEBE2D5C8BF747A9 


AEBE2D5C8BF747A9 


444F92BF78E77BB1 


444F92BF78E77BB1 


AEBE2D5C8BF747A9 


AEBE2D5C8BF747A9 


444F92BF78E77BB1 


444F92BF78E77BB1 


444F92BF78E77BB1 


444F92BF78E77BB1 


444F92BF78E77BB1 


444F92BF78E77BB1 


FB1611A83BEB567F 


FB1611A83BEB567F 


Informational 


C6874607903270CD 


C6874607903270CD 


C6874607903270CD 


C6874607903270CD 


C6874607903270CD 


C6874607903270CD 


C6874607903270CD 


C6874607903270CD 
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11 


In 


Enc 


XorT 


12 


In 


Enc 


XorT 


13 


In 


Enc 


XorT 


14 


In 


Enc 


XorT 


15 


In 


Enc 


XorT 


16 


In 


Enc 


XorT 


AES Key Wrap Algorithm 


A3223BD7237F 7039 
740A273461ED82C6 
B50C330616E7B1C7 
740A273461ED82C6 
B50C330616E7B1CC 
740A273461ED82C6 


B50C330616E7B1CC 
740A273461ED82C6 
FB8AFF3F083E12CE 
0B08CFDF48020FOD 
FB8AFF3F083E12C2 
0B08CFDF48020FOD 


FB8AFF3F083E12C2 
0B08CFDF48020FOD 
82F597607784A33C 
OBO8CFDF48020F0D 
82F597607784A331 
OBO8CFDF48020F0D 


82F597607784A331 
OBO8CFDF48020F0D 
D48E5E83B7C906DB 
0B08CFDF48020FOD 
D48E5E83B7C906D5 
0B08CFDF48020FOD 


D48E5E83B7C906D5 
0B08CFDF48020FOD 
1BF2B1CD947311B6 
C490C33642717146 
1BF2B1CD947311B9 
C490C33642717146 


1BF2B1CD947311B9 
C490C33642717146 
C9F5F26A378011DE 


FB1611A83BEB567F 


FB1611A83BEB567F 


FB1611A83BEB567F 


FB1611A83BEB567F 


FB1611A83BEB567F 


FB1611A83BEB567F 


FB1611A83BEB567F 


FB1F2965FCE1E783 


FB1F2965FCE1E783 


FB1F2965FCE1E783 


FB1F2965FCE1E783 


FB1F2965FCE1E783 


FB1F2965FCE1E783 


FB1F2965FCE1E783 


FB1F2965FCE1E783 


FB1F2965FCE1E783 


F6E6F4FBE30E71E4 


C490C33642717146 
C9F5F26A378011CE 


F6E6F4FBE30E71E4 


C490C33642717146 


Schaad & Housley 


Informational 


C6874607903270CD 


73EDC8CB9322C34E 


73EDC8CB9322C34E 


73EDC8CB9322C34E 


73EDC8CB9322C34E 


73EDC8CB9322C34E 


73EDC8CB9322C34E 


73EDC8CB9322C34E 


73EDC8CB9322C34E 


73EDC8CB9322C34E 


D36F4FFBA2C82ED9 


D36F4FFBA2C82ED9 


D36F4FFBA2C82ED9 


D36F4FFBA2C82ED9 


D36F4FFBA2C82ED9 


D36F4FFBA2C82ED9 


D36F4FFBA2C82ED9 


D36F4FFBA2C82ED9 
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R2 


769C8B80A32CB895 


769C8B80A32CB895 


769C8B80A32CB895 


769C8B80A32CB895 


769C8B80A32CB895 


D36F4FFBA2C82ED9 


D36F4FFBA2C82ED9 


D36F4FFBA2C82ED9 


D36F4FFBA2C82ED9 
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17 

In C9F5F26A378011CE F6E6F4FBE30E71E4 D36F4FFBA2C82ED9 
C490C33642717146 

Enc 39128CE5E435F3A0 F6E6F4FBE30E71E4 769C8B80A32CB895 
C490C33642717146 

XorT 39128CE5E4325F3B1 F6E6F4FBE30E71E4 769C8B80A32CB895 
C490C33642717146 

18 

In 39128CE5E435F3B1 F6E6F4FBE30E71E4 769C8B80A32CB895 
C490C33642717146 

Enc A8F9BC1612C68B2D F6E6F4FBE30E71E4 769C8B80A32CB895 
8CD5D17D6B254DA1 

XorT A8F9BC1612C68B3F F6E6F4FBE30E71E4 769C8B80A32CB895 
8CD5D17D6B254DA1 

Ciphertext A8F9BC1612C68B3F F6E6F4FBE30E71E4 

769C8B80A32CB895 8CD5D17D6B254DA1 

Unwrap: 

Step t A/R3 RI 

18 

In A8F9BC1612C68B3F F6E6F4FBE30E71E4 
8CD5D17D6B254DA1 

XorT A8F9BC1612C68B2D F6E6F4FBE30E71E4 
8CD5D17D6B254DA1 

Dec 7 39128CE5E435F3B1 F6E6F4FBE30E71E4 
C490C33642717146 

LT 

In 39128CE5E435F3B1 F6E6F4FBE30E71E4 
C490C33642717146 

XorT 39128CE5E435F3A0 F6E6F4FBE30E71E4 
C490C33642717146 

Dec C9F5F26A378011CE F6E6F4FBE30E71E4 
C490C33642717146 

16 

In C9F5F26A378011CE F6E6F4FBE30E71E4 
C490C33642717146 

XorT C9F5F26A378011DE F6E6F4FBE30E71E4 
C490C33642717146 

Dec 1BF2B1CD947311B9 FB1F2965FCE1E783 
C490C33642717146 

Schaad & Housley Informational 


[Page 27] 


RFC 3394 


1:5 


In 


XorT 


Dec 


14 


In 


XorT 


Dec 


13 


In 


XorT 


Dec 


12 


In 


XorT 


Dec 


11 


In 


XorT 


Dec 


10 


In 


XorT 


Dec 


Schaad & 


1BF2B1CD947311B9 
C490C33642717146 
1BF2B1CD947311B6 
490C33642717146 
48E5E83B7C906D5 
BO8CFDF48020F0D 


C 
D 
0 


D48E5E83B7C906D5 
0B08CFDF48020FOD 
D48E5E83B7C906DB 
0B08CFDF48020FOD 
82F597607784A331 
0B08CFDF48020FOD 


82F597607784A331 
0B08CFDF48020FOD 
82F597607784A33C 
0B08CFDF48020FOD 
FB8AFF3F083E12C2 
0B08CFDF48020FOD 


FB8AFF3F083E12C2 
0B08CFDF48020FOD 
FB8AFF3F083E12CE 
0B08CFDF48020FOD 
B50C330616E7B1CC 
740A273461ED82C6 


B50C330616E7B1CC 
740A273461ED82C6 
B50C330616E7B1C7 
740A273461ED82C6 
A3223BD7237F 7039 
740A273461ED82C6 


A3223BD7237F 7039 
740A273461ED82C6 
A3223BD7237F7033 
740A273461ED82C6 
01271BA91D9804FF 
740A273461ED82C6 


Housley 


FB1F2965FCE1E783 


FB1F2965FCE1E783 


FB1F2965FCE1E783 


FB1F2965FCE1E783 


FB1F2965FCE1E783 


FB1F2965FCE1E783 


FB1F2965FCE1E783 


FB1F2965FCE1E783 


FB1611A83BEB567F 


FB1611A83BEB567F 


FB1611A83BEB567F 


FB1611A83BEB567F 


FB1611A83BEB567F 


FB1611A83BEB567F 


FB1611A83BEB567F 


FB1611A83BEB567F 


FB1611A83BEB567F 


444F92BF78E77BB1 


Informational 


AES Key Wrap Algorithm 


D36F4FFBA2C82ED9 


D36F4FFBA2C82ED9 


D36F4FFBA2C82ED9 


D36F4FFBA2C82ED9 


D36F4FFBA2C82ED9 


73EDC8CB9322C34E 


73EDC8CB9322C34E 


73EDC8CB9322C34E 


73EDC8CB9322C34E 


73EDC8CB9322C34E 


73EDC8CB9322C34E 


73EDC8CB9322C34E 


73EDC8CB9322C34E 


73EDC8CB9322C34 


Bl 


C6874607903270CD 


C6874607903270CD 


C6874607903270CD 


C6874607903270CD 
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Schaad & 


AES Key Wrap Algorithm 


01271BA91D9804FF 
740A273461ED82C6 
01271BA91D9804F6 
740A273461ED82C6 
2A5FFCEF1F1916D0 
39EBCIA1A53FF55B 


2A5FFCEF1F1916D0 
39EBCIA1A53FF55B 
2A5FFCEF1F1916D8 
39EBCIA1A53FF55B 
D532789E4E79D81E 
39EBCIA1A53FF55B 


D532789E4E79D81E 
39EBCIA1A53FF55B 
D532789E4E79D819 
39EBCIA1A53FF55B 
6F85BFBDB7E880E5 
39EBCIA1A53FF55B 


6F85BFBDB7E880E5 
39EBCIA1A53FF55B 
6F85BFBDB7E880E3 
39EBCIA1A53FF55B 
BF213BFD04E8A24A 
6CA405593A3B5154 


BF213BFD04E8A24A 
6CA405593A3B5154 
BF213BFD04E8A24F 
6CA405593A3B5154 
F1D28EA6295891E8 
6CA405593A3B5154 


F1D28EA6295891E8 
6CA405593A3B5154 
F1D28EA6295891EC 
6CA405593A3B5154 
9DF8F5405FBCOO0C2 
6CA405593A3B5154 


Housley 


444F92BF78E77BB1 


444F92BF78E77BB1 


444F92BF78E77BB1 


444F92BF78E77BB1 


444F92BF78E77BB1 


444F92BF78E77BB1 


444F92BF78E77BB1 


444F92BF78E77BB1 


C6874607903270CD 


C6874607903270CD 


C6874607903270CD 


C6874607903270CD 


C6874607903270CD 


AEBE2D5C8BF747A9 


AEBE2D5C8BF747A9 


AEBE2D5C8BF747A9 


0CC86A4D9B9C6A31 


0CC86A4D9B9C6A31 


0CC86A4D9B9C6A31 


0CC86A4D9B9C6A31 


0CC86A4D9B9C6A31 


0CC86A4D9B9C6A31 


0CC86A4D9B9C6A31 


0CC86A4D9B9C6A31 


0CC86A4D9B9C6A31 


F661BD9F31FBFA31 


Informational 


AEBE2D5C8BF747A9 


AEBE2D5C8BF747A9 


AEBE2D5C8BF747A9 


AEBE2D5C8BF747A9 


AEBE2D5C8BF747A9 


A 


tri 


BE2D5C8BF747A9 


F60EOCDB7F429FE8 


F60EOCDB7F429FE8 


F60EOCDB7F429FE8 


F60EOCDB7F429FE8 
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F661BD9F31FBFA31 


F661BD9F31FBFA31 


F661BD9F31FBFA31 


F661BD9F31FBFA31 


F661BD9F31FBFA31 


F661BD9F31FBFA31 


F661BD9F31FBFA31 


F661BD9F31FBFA31 


0011223344556677 


AES Key Wrap Algorithm 


F60EOCDB7F429FE8 


F60EOCDB7F429FE8 


F60EOCDB7F429FE8 


F60EOCDB7F429FE8 


F60EOCDB7F429FE8 


8899AABBCCDDEEFF 


8899AABBCCDDEEFF 


8899AABBCCDDEEFF 


8899AABBCCDDEEFF 


A6A6A6A6A6A6A6A6 0011223344556677 


8899AABBCCDDEEFF 0001020304050607 


RFC 3394 

3 

In 9DF8F5405FBC00C2 
6CA405593A3B5154 

XorT 9DF8F5405FBCOOC1 
6CA405593A3B5154 

Dec D450EA5C5BBCB563 
0001020304050607 

2 

In D450EA5C5BBCB563 
0001020304050607 

XorT D450EA5C5BBCB561 
0001020304050607 

Dec 794314D454E3FDEO 
0001020304050607 

4 

In 794314D454E3FDEO 
0001020304050607 

XorT 794314D454E3FDE1 
0001020304050607 

Dec A6A6A6A6A6A6A6A6G 
0001020304050607 

Plaintext 

Output: 

Key Data: 


4.6 Wrap 256 bits of Key Data with a 256-bit KEK 


Input: 


KEK: 


000102030405060708090A0 


Key Data: 
00112233445566778899AABBCCDDEEFF000102030405060708090A0BOCODOEOF 


Schaad & Housley 


Informational 


September 2002 


00112233445566778899AABBCCDDEEFF0001020304050607 


BOCODOEOF101112131415161718191A1B1C1D1E1F 
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Wrap: 


Step 


Schaad & 


A/R3 


A6A6A6A6A6A6A6A6 
0001020304050607 
794314D454E3FDE1 
0001020304050607 
794314D454E3FDEO 
0001020304050607 


794314D454E3FDEO 
0001020304050607 
D450EA5C5BBCB561 
0001020304050607 
D450EA5C5BBCB563 
0001020304050607 


D450EA5C5BBCB563 
0001020304050607 
9DF8F5405FBC00C1 
6CA405593A3B5154 
9DF8F5405FBC00C2 
6CA405593A3B5154 


9DF8F5405FBC00C2 
6CA405593A3B5154 
564408FDDODD2EA4 
6CA405593A3B5154 
564408FDDODD2EA0 
6CA405593A3B5154 


R1/R4 


0011223344556677 
08090A0B0C0DOEOF 
F661BD9F31FBFA31 
08090A0BOCODOEOF 
F661BD9F31FBFA31 
08090A0B0C0DOEOF 


F661BD9F31FBFA31 
08090A0BOCODOEOF 
F661BD9F31FBFA31 
08090A0BOCODOEOF 
F661BD9F31FBFA31 
08090A0B0C0DOEOF 


F661BD9F31FBFA31 
08090A0B0C0DOEOF 
F661BD9F31FBFA31 
08090A0BOCODOEOF 
F661BD9F31FBFA31 
08090A0B0C0DOEOF 


F661BD9F31FBFA31 
08090A0BOCODOEOF 
F661BD9F31FBFA31 
E5923CB9FDB56FBC 
F661BD9F31FBFA31 
E5923CB9FDB56FBC 


564408FDDODD2EA0 
6CA405593A3B5154 


F661BD9F31FBFA31 
E5923CB9FDB56FBC 


4EF02EDD3146AFBB 
6CA405593A3B5154 
4EF02EDD3146AFBE 
6CA405593A3B5154 


Housley 


E7D1194D853E53F8 
E5923CB9FDB56FBC 
E7D1194D853E53F8 
E5923CB9FDB56FBC 


Informational 


AES Key Wrap Algorithm 


R2 


8899AABBCCDDEEFF 


8899AABBCCDDEEFF 


8899AABBCCDDEEFF 


8899AABBCCDDEEFF 


F60EOCDB7F429FE8 


F60EOCDB7F429FE8 


F60EOCDB7F429FE8 


F60EOCDB7F429FE8 


F60EOCDB7F429FE8 


F60EOCDB7F429FE8 


F60EOCDB7F429FE8 


F60EOCDB7F429FE8 


F60EOCDB7F429FE8 


F60EOCDB7F429FE8 


F60EOCDB7F429FE8 
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AES Key Wrap Algorithm 


6 
In 4EFO2EDD3146AFBE E7D1194D853E53F8 
6CA405593A3B5154 E5923CB9FDB56FBC 
Enc  963AAFFD96B223EC E7D1194D853E53F8 
6CA405593A3B5154 E5923CB9FDB56FBC 
XorT 963AAFFD96B223EA E7D1194D853E53F8 
6CA405593A3B5154 E5923CB9FDB56FBC 
7 
In 963AAFFD96B223EA E7D1194D853E53F8 
6CA405593A3B5154 E5923CB9FDB56FBC 
Enc 66D7A8ADD086B9DD E7D1194D853E53F8 
C365B66943E2D760 E5923CB9FDB56FBC 
XorT 66D7A8ADD086B9DA E7D1194D853E53F8 
C365B66943E2D760 E5923CB9FDB56FBC 
8 
In 66D7A8ADD086B9DA E7D1194D853E53F8 
C365B66943E2D760 E5923CB9FDB56FBC 
Enc  C58B9D3AC6D5B94E E7D1194D853E53F8 
C365B66943E2D760 73E3B6CBE5D05D74 
XorT C58B9D3AC6D5B946 E7D1194D853E53F8 
C365B66943E2D760 73E3B6CBE5D05D74 
9 
In C58B9D3AC6D5B946 E7D1194D853E53F8 
C365B66943E2D760 73E3B6CBE5D05D74 
Enc 1A681354E84C41F8 D6AE29ECE7192D43 
C365B66943E2D760 73E3B6CBE5D05D74 
XorT 1A681354E84C41F1 D6AE29ECE7192D43 
C365B66943E2D760 73E3B6CBE5D05D74 
10 
In 1A681354E84C41F1 D6AE29ECE7192D43 
C365B66943E2D760 73E3B6CBE5D05D74 
Enc DBA417FB51F9E3CB D6AE29ECE7192D43 
C365B66943E2D760 73E3B6CBE5D05D74 
XorT DBA417FB51F9E3C1 D6AE29ECE7192D43 
C365B66943E2D760 73E3B6CBE5D05D74 
11 
In DBA417FB51F9E3C1 D6AE29ECE7192D43 
C365B66943E2D760 73E3B6CBE5D05D74 
Enc 0629EB29A42E4FD9 D6AE29ECE7192D43 
F56701DAF0388216 73E3B6CBE5D05D74 
XorT 0629EB29A42E4FD2 D6AE29ECE7192D43 
F56701DAF0388216 73E3B6CBE5D05D74 
Schaad & Housley Informational 


F60EOCDB7F429FE8 


EFD48BA304945576 


EFD48BA304945576 


EFD48BA304945576 


EFD48BA304945576 


EFD48BA304945576 


EFD48BA304945576 


EFD48BA304945576 


EFD48BA304945576 


EFD48BA304945576 


EFD48BA304945576 


EFD48BA304945576 


EFD48BA304945576 


FBEC169FA5C0F6BA 


FBEC169FA5C0F6BA 


FBEC169FA5C0F6BA 


FBEC169FA5C0F6BA 


FBEC169FA5C0F6BA 
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12 

In 0629EB29A42E4FD2 
F56701DAF0388216 

Enc  F9ED8A1429515665 
F56701DAF0388216 

XorT F9ED8A1429515669 
F56701DAF0388216 

13 

In F9ED8A1429515669 
F56701DAF0388216 

Enc 2E8E2B6BB2016696 
F56701DAF0388216 

XorT 2E8E2B6BB201669B 
F56701DAF0388216 

14 

In 2E8E2B6BB201669B 
F56701DAF0388216 

Enc 15342443CB95ADB1 
F56701DAF0388216 

XorT 15342443CB95ADBF 
F56701DAF0388216 

15 

In 15342443CB95ADBF 
F56701DAF0388216 

Enc  33FE29365885C4B7 
C272E9466AAE98F9 

XorT 33FE29365885C4B8 
C272E9466AAE98F9 

16 

In 33FE29365885C4B8 
C272E9466AAE98F9 

Enc 5075496800978B4A 
C272E9466AAE98F9 

XorT 5075496800978B5A 
C272E9466AAE98F9 

17 

In 5075496800978B5A 
C272E9466AAE98F9 

Enc A5382A26B47551F1 
C272E9466AAE98F9 

XorT A5382A26B47551E0 
C272E9466AAE98F9 


Schaad & Housley 


D6AE29ECE7192D43 
73E3B6CBE5D05D74 
D6AE29ECE7192D43 
3CF149E90E8C04D9 
D6AE29ECE7192D43 
3CF149E90E8C04D9 


D6AE29ECE7192D43 
3CF149E90E8C04D9 
4745856AF333F01F 
3CF149E90E8C04D9 
4745856AF333F01F 
3CF149E90E8C04D9 


4745856AF333F01F 
3CF149E90E8C04D9 
4745856AF333F01F 
3CF149E90E8C04D9 
4745856AF333F01F 
3CF149E90E8C04D9 


4745856AF333F01F 
3CF149E90E8C04D9 
4745856AF333F01F 
3CF149E90E8C04D9 
4745856AF333F01F 
3CF149E90E8C04D9 


4745856AF333F01F 
3CF149E90E8C04D9 
4745856AF333F01F 
40F68C91DB49702C 
4745856AF333F01F 
40F68C91DB49702C 


4745856AF333F01F 
40F68C91DB49702C 
1BB8C765A84195E7 
40F68C91DB49702C 
1BB8C765A84195E7 
40F68C91DB49702C 


Informational 


FBEC169FA5C0F6BA 


FBEC169FA5C0F6BA 


FBEC169FA5C0F6BA 


FBEC169FA5C0F6BA 


FBEC169FA5C0F6BA 


FBEC169FA5C0F6BA 


FBEC169FA5C0F6BA 


BCA418BBF7DCE60B 


BCA418BBF7DCE60B 


BCA418BBF7DCE60B 


BCA418BBF7DCE60B 


BCA418BBF7DCE60B 


BCA418BBF7DCE60B 


BCA418BBF7DCE60B 


BCA418BBF7DCE60B 


BCA418BBF7DCE60B 


BCA418BBF7DCE60B 


BCA418BBF7DCE60B 
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18 


In 


Enc 


XorT 


19 


In 


Enc 


XorT 


20 


In 


Enc 


XorT 


21 


In 


Enc 


XorT 


22 


In 


Enc 


XorT 


23 


In 


Enc 


XorT 


Schaad & 


A5382A26B47551E0 
C272E9466AAE98F9 
F19D80D437EFE8F9 
C272E9466AAE98F9 
F19D80D437EFE8EB 
C272E9466AAE98F9 


F19D80D437EFE8EB 
C272E9466AAE98F9 
B422B444B87A190B 
1CFBF6B4C24CB982 
B422B444B87A1918 
1CFBF6B4C24CB982 


B422B444B87A1918 
1CFBF6B4C24CB982 
D058823360F88A37 
1CFBF6B4C24CB982 
D058823360F88A23 
1CFBF6B4C24CB982 


D058823360F88A23 
1CFBF6B4C24CB982 
C89A96CA7B163ECC 
1CFBF6B4C24CB982 
C89A96CA7B163ED9 
1CFBF6B4C24CB982 


C89A96CA7B163ED9 
1CFBF6B4C24CB982 
39D02FE7435870ED 
1CFBF6B4C24CB982 
39D02FE7435870FB 
1CFBF6B4C24CB982 


39D02FE7435870FB 
1CFBF6B4C24CB982 
OAEB82AE3146A91B 
CBC7F0E71A99F43B 
OAEB82AE3146A90C 
CBC7F0E71A99F43B 


Housley 


1BB8C765A84195E7 
40F68C91DB49702C 
1BB8C765A84195E7 
40F68C91DB49702C 
1BB8C765A84195E7 
40F68C91DB49702C 


1BB8C765A84195E7 
40F68C91DB49702C 
1BB8C765A84195E7 
40F68C91DB49702C 
BB8C765A84195E7 
40F68C91DB49702C 


= 


1BB8C765A84195E7 
40F68C91DB49702C 
1BB8C765A84195E7 
07DFE775B9687E73 
1BB8C765A84195E7 
07DFE775B9687E73 


= 


BB8C765A84195E7 
07DFE775B9687E73 
CBCCB35CFB87F826 
07DFE775B9687E73 
CBCCB35CFB87F826 
07DFE775B9687E73 


CBCCB35CFB87F826 
07DFE775B9687E73 
CBCCB35CFB87F826 
07DFE775B9687E73 
CBCCB35CFB87F826 
07DFE775B9687E73 


CBCCB35CFB87F826 
07DFE775B9687E73 
CBCCB35CFB87F826 
07DFE775B9687E73 
CBCCB35CFB87F826 
07DFE775B9687E73 


Informational 


AES Key Wrap Algorithm 


BCA418BBF7DCE60B 


F7EDAD518C960D36 


F7EDAD518C960D36 


F7EDAD518C960D36 


F7EDAD518C960D36 


F7EDAD518C960D36 


F7EDAD518C960D36 


F7EDAD518C960D36 


F7EDAD518C960D36 


F7EDAD518C960D36 


F7EDAD518C960D36 


F7EDAD518C960D36 


F7EDAD518C960D36 


3F5786E2D80ED326 


3F5786E2D80ED326 


3F5786E2D80ED326 


3F5786E2D80ED326 


3F5786E2D80ED326 
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AES Key Wrap Algorithm 


3F5786E2D80ED326 


3F5786E2D80ED326 


3F5786E2D80ED326 


R2 


3F5786E2D80ED326 


3F5786E2D80ED326 


3F5786E2D80ED326 


3F5786E2D80ED326 


3F5786E2D80ED326 


3F5786E2D80ED326 


3F5786E2D80ED326 


3F5786E2D80ED326 


F7EDAD518C960D36 


F7EDAD518C960D36 


F7EDAD518C960D36 


F7EDAD518C960D36 


24 

In OAEB82AE3146A90C CBCCB35CFB87F826 
CBC7F0E71A99F43B 07DFE775B9687E73 

Enc 28C9F404C4B810EC CBCCB35CFB87F826 
CBC7F0E71A99F43B FB988B9B7A02DD21 

XorT 28C9F404C4B810F4 CBCCB35CFB87F826 
CBC7F0E71A99F43B FB988B9B7A02DD21 

Output: 

Ciphertext 

CBC7F0E71A99F43B FB988B9B7A02DD21 

Unwrap: 

Step t A/R3 R1/R4 

24 

In 28C9F404C4B810F4 CBCCB35CFB87F826 
CBC7F0E71A99F43B FB988B9B7A02DD21 

XorT 28C9F404C4B810EC CBCCB35CFB87F826 
CBC7F0E71A99F43B FB988B9B7A02DD21 

Dec 0AEB82AE3146A90C CBCCB35CFB87F826 
CBC7F0E71A99F43B 07DFE775B9687E73 

23 

In OAEB82AE3146A90C CBCCB35CFB87F826 
CBC7F0E71A99F43B 07DFE775B9687E73 

XorT OAEB82AE3146A91B CBCCB35CFB87F826 
CBC7F0E71A99F43B 07DFE775B9687E73 

Dec 39D02FE7435870FB CBCCB35CFB87F826 
1CFBF6B4C24CB982 07DFE775B9687E73 

22 

In 39D02FE7435870FB CBCCB35CFB87F826 
1CFBF6B4C24CB982 07DFE775B9687E73 

XorT 39D02FE7435870ED CBCCB35CFB87F826 
1CFBF6B4C24CB982 07DFE775B9687E73 

Dec C89A96CA7B163ED9 CBCCB35CFB87F826 
1CFBF6B4C24CB982 07DFE775B9687E73 

21 

In C89A96CA7B163ED9 CBCCB35CFB87F826 
1CFBF6B4C24CB982 07DFE775B9687E73 

XorT C89A96CA7B163ECC CBCCB35CFB87F826 
1CFBF6B4C24CB982 07DFE775B9687E73 

Dec D058823360F88A23 1BB8C765A84195E7 
1CFBF6B4C24CB982 07DFE775B9687E73 

Schaad & Housley Informational 
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20 


In 


XorT 


Dec 


19 


In 


XorT 


Dec 


18 


In 


XorT 


Dec 


17 


In 


XorT 


Dec 


16 


In 


XorT 


Dec 


15 


In 


XorT 


Dec 


Schaad & 


AES Key Wrap Algorithm 


D058823360F88A23 
1CFBF6B4C24CB982 
D058823360F88A37 
1CFBF6B4C24CB982 
B422B444B87A1918 
1CFBF6B4C24CB982 


B422B444B87A1918 
1CFBF6B4C24CB982 
B422B444B87A190B 
1CFBF6B4C24CB982 
F19D80D437EFE8EB 
C272E9466AAE98F9 


F19D80D437EFE8EB 
C272E9466AAE98F9 
F19D80D437EFE8F9 
C272E9466AAE98F9 
A5382A26B47551E0 
C272E9466AAE98F9 


A5382A26B47551E0 
C272E9466AAE98F9 
A5382A26B47551F1 
C272E9466AAE98F9 
5075496800978B5A 
C272E9466AAE98F9 


5075496800978B5A 
C272E9466AAE98F9 
5075496800978B4A 
C272E9466AAE98F9 
33FE29365885C4B8 
C272E9466AAE98F9 


33FE29365885C4B8 
C272E9466AAE98F9 
33FE29365885C4B7 
C272E9466AAE98F9 
15342443CB95ADBF 
F56701DAF0388216 


Housley 


1BB8C765A84195E7 
07DFE775B9687E73 
1BB8C765A84195E7 
07DFE775B9687E73 
1BB8C765A84195E7 
40F68C91DB49702C 


= 


BB8C765A84195E7 
40F68C91DB49702C 
BB8C765A84195E7 
40F68C91DB49702C 
1BB8C765A84195E7 
40F68C91DB49702C 


= 


1BB8C765A84195E7 
40F68C91DB49702C 
1BB8C765A84195E7 
40F68C91DB49702C 
1BB8C765A84195E7 
40F68C91DB49702C 


1BB8C765A84195E7 
40F68C91DB49702C 
1BB8C765A84195E7 
40F68C91DB49702C 
4745856AF333F01F 
40F68C91DB49702C 


4745856AF333F01F 
40F68C91DB49702C 
4745856AF333F01F 
40F68C91DB49702C 
4745856AF333F01F 
3CF149E90E8C04D9 


4745856AF333F01F 
3CF149E90E8C04D9 
4745856AF333F01F 
3CF149E90E8C04D9 
4745856AF333F01F 
3CF149E90E8C04D9 


Informational 


F7EDAD518C960D36 


F7EDAD518C960D36 


F7EDAD518C960D36 


F7EDAD518C960D36 


F7EDAD518C960D36 


F7EDAD518C960D36 


F7EDAD518C960D36 


F7EDAD518C960D36 


BCA418BBF7DCE60B 


BCA418BBF7DCE60B 


BCA418BBF7DCE60B 


BCA418BBF7DCE60B 


BCA418BBF7DCE60B 


BCA418BBF7DCE60B 


BCA418BBF7DCE60B 


BCA418BBF7DCE60B 


BCA418BBF7DCE60B 


BCA418BBF7DCE60B 
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14 


In 


XorT 


Dec 


13 


In 


XorT 


Dec 


12 


In 


XorT 


Dec 


11 


In 


XorT 


Dec 


Schaad & 


15342443CB95ADBF 
F56701DAF0388216 
15342443CB95ADB1 
F56701DAF0388216 
2E8E2B6BB201669B 
F56701DAF0388216 


2E8E2B6BB201669B 
F56701DAF0388216 
2E8E2B6BB2016696 
F56701DAF0388216 
F9ED8A1429515669 
F56701DAF0388216 


F9ED8A1429515669 
F56701DAF0388216 
F9ED8A1429515665 
F56701DAF0388216 
0629EB29A42E4FD2 
F56701DAF0388216 


0629EB29A42E4FD2 
F56701DAF0388216 
0629EB29A42E4FD9 


F56701DAF0388216 
DBA417FB51F9E3C1 
C365B66943E2D760 
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Output: 
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5. Security Considerations 


The key wrap algorithm includes a strong integrity check on the key 


data. 


If unwrapping produces the expected check value in A[0], 
the chance that the key data is corrupt is 2^-64. 
produces an unexpected value, 
return an error, 


Implementations must protect the KEK from disclosure. 
the KEK may result in the disclosure of all key data protected with 


that 


KEK. 
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